This IP address has been reported a total of
149
times from
114 distinct
sources.
123.139.159.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 10 04:34:16 UK1 sshd[3756215]: Failed password for invalid user test from 123.139.159.99 port 38 ...
show moreJul 10 04:34:16 UK1 sshd[3756215]: Failed password for invalid user test from 123.139.159.99 port 38353 ssh2
Jul 10 04:34:13 UK1 sshd[3756215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.139.159.99
Jul 10 04:34:13 UK1 sshd[3756215]: Invalid user test from 123.139.159.99 port 38353
Jul 10 04:34:16 UK1 sshd[3756215]: Failed password for invalid user test from 123.139.159.99 port 38353 ssh2
Jul 10 04:34:19 UK1 sshd[3756215]: Failed password for invalid user test from 123.139.159.99 port 38353 ssh2
...
show less
Active SSH brute-force detected. Logs: 2026-07-10T01:10:02.663033+00:00 XERA-VPS3 sshd[3666167]: Fai ...
show moreActive SSH brute-force detected. Logs: 2026-07-10T01:10:02.663033+00:00 XERA-VPS3 sshd[3666167]: Failed password for root from 123.139.159.99 port 1083 ssh2 2026-07-10T01:10:06.114069+00:00 XERA-VPS3 sshd[3666167]: Failed password for root from 123.139...
show less
SSH brute-force detected: 11 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-07-08T10:53:53.695201+00:00 nbg01-02-secure sshd[46961]: Failed password for root from 123.139. ...
show more2026-07-08T10:53:53.695201+00:00 nbg01-02-secure sshd[46961]: Failed password for root from 123.139.159.99 port 5436 ssh2
2026-07-08T10:54:06.223422+00:00 nbg01-02-secure sshd[46961]: Disconnecting authenticating user root 123.139.159.99 port 5436: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-07-08T10:54:07.916117+00:00 nbg01-02-secure sshd[46963]: Invalid user test from 123.139.159.99 port 31389
...
show less
2026-07-04T08:47:45.501429+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139. ...
show more2026-07-04T08:47:45.501429+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139.159.99 port 14865 ssh2
2026-07-04T08:47:48.106784+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139.159.99 port 14865 ssh2
2026-07-04T08:47:52.845155+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139.159.99 port 14865 ssh2
2026-07-04T08:47:57.324040+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139.159.99 port 14865 ssh2
2026-07-04T08:48:00.329994+02:00 zgrav sshd-session[2459601]: Failed password for root from 123.139.159.99 port 14865 ssh2
...
show less
Jul 4 08:32:09 CyberGecko sshd[544065]: Failed password for root from 123.139.159.99 port 36581 ssh ...
show moreJul 4 08:32:09 CyberGecko sshd[544065]: Failed password for root from 123.139.159.99 port 36581 ssh2
Jul 4 08:32:12 CyberGecko sshd[544065]: Failed password for root from 123.139.159.99 port 36581 ssh2
Jul 4 08:32:16 CyberGecko sshd[544065]: Failed password for root from 123.139.159.99 port 36581 ssh2
Jul 4 08:32:22 CyberGecko sshd[544065]: Disconnecting authenticating user root 123.139.159.99 port 36581: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
2026-07-04T04:04:53.845070+01:00 frans sshd[2519631]: Failed password for root from 123.139.159.99 p ...
show more2026-07-04T04:04:53.845070+01:00 frans sshd[2519631]: Failed password for root from 123.139.159.99 port 35253 ssh2
2026-07-04T04:04:56.485534+01:00 frans sshd[2519631]: Failed password for root from 123.139.159.99 port 35253 ssh2
2026-07-04T04:04:59.865295+01:00 frans sshd[2519631]: Failed password for root from 123.139.159.99 port 35253 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 149 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩